Behavioral task
behavioral1
Sample
99a4d502a113d60143511f729be973aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99a4d502a113d60143511f729be973aa.exe
Resource
win10v2004-20231215-en
General
-
Target
99a4d502a113d60143511f729be973aa
-
Size
2.6MB
-
MD5
99a4d502a113d60143511f729be973aa
-
SHA1
33ed840c1dc727afc5fe17ae3938c08c2faa78f1
-
SHA256
34a40e7b1a3c83b00644e0e9e092dda05fc32c2dbda6a0809fde129b5cfbed95
-
SHA512
a2450ca8d4db80bd7280044f531787463d4a20a8313a6d739535267739ee4aeeca9f7067dab5bb10e86e0bdafb381ca1dd4dde88f9ddcac26860aafd29dad026
-
SSDEEP
49152:corm36x9SFBt8WQ3au92gA2x1Oy1pay3:jYzOhxAkJ3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99a4d502a113d60143511f729be973aa
Files
-
99a4d502a113d60143511f729be973aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE